A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /admin/index.php. Such manipulation of the argument Username leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-63719. The attack can be launched remotely. No exploit exists.